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6,925,638 

PATENT NO 

DATED : August 2, 2005 

INVENTOR(S) :Kovedetal. 

It is certified that error appears in the above-identified patent and that said Letters Patent 
Is hereby corrected as shown below: 

Claim 1 should read as follows: 



1. A method of detecting mutability of variables, objects, fields, and classes in a program component 
executing on a computing device including a processor and memory, said component being created 
in an object-oriented programming language, the method comprising the steps of: 

determining whether any variable in the program component could undergo a state modification 
of a first type, said first type state modification being made by at least one method that is within the 
program component; and 

performing encapsulation analysis to determine whether any variable in the program component 
could undergo a state modification of a second type, said second type state modification being made 
by at least one method that is not within the program component, to identify an exposure of the 
variables of the program component to modification external to the program component, 

wherein a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object, 

an object is mutable if its state ever changes after said object is initialized, said state of said object 
being a set of states of all associated variables, 

a field is mutable if any variable corresponding to said field is mutable, and 

a class is mutable if any instance fields implemented by said class are mutable. 
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It is certified that error appears in the above-identified patent and that said Letters Patent 
is hereby corrected as shown below: 

Claim 7 should read as follows: 

7. A method of detecting mutability of classes in a program component executing on a computing 
device including a processor and memory, said component being created in an object-oriented 
programming language, the method comprising the steps of: 

obtaining a set of classes, each of said classes being classified as one of mutable, immutable, and 
undecided; 

testing each undecided class, said test being comprised of the sub-steps of: 
testing each field in said undecided class being tested, said test being comprised of the 
sub-sub-steps of: 

determining whether any variable corresponding to said each field could undergo a state 
modification of first type, said first type state modification being made by at least one method that is 
within said component; and 

performing encapsulation analysis to determine whether any variable corresponding to said each 
field could undergo a state modification of a second type, said second type state modification being 
made by at least one method that is not within said component; 

classifying said each field as immutable if no possible first type or second type state modifications 
are found; 

classifying said each field as undecided if there is insufficient class mutability information; and 
classifying said each field as mutable otherwise; 

re-classifying said undecided class as mutable if any fields in said undecided class are mutable; 

re-classifying said undecided class as immutable if all fields in said undecided class are mmutable; 

repeating said testing each undecided class step until a number of undecided classes after a 
repetition of said testing step is identical to a number of undecided classes before the repetition of 
said testing step; and 

re-classifying remaining undecided classes as mutable classes, to identify an exposure of variables 
of the program component to modification external to the program component. 
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It is certified that error appears in the above-identified patent and that said Letters Patent 
is hereby corrected as shown below: 

Claim 8 should read as follows: 

8. A method of detecting mutability of classes in a program component executing on a computing device 
including a processor and memory, said component being created in an object-oriented programming 
language, the method comprising the steps of: 

obtaining a set of classes, each of said classes being classified as one of mutable, immutable, and 
undecided; testing each undecided class, said test being comprised of the sub-steps of: 

testing each instance field in said undecided class being tested, said test being comprised of the 
sub-sub-steps of: 

determining whether any variable corresponding to said each instance field could undergo a state 
modification of first type, said first type state modification being made by at least one method that is 
within said component; and 

performing encapsulation analysis to determine whether any variable corresponding to said each 
instance field could undergo a state modification of a second type, said second type state modification 
being made by at least one method that is not within said component; 

classifying said each instance field as immutable if no possible first type or second type state 
modifications are found; 

classifying said each instance field as undecided if there is insufficient class mutability information; and 
classifying said each instance field as mutable otherwise; 

re-classifying said undecided class as mutable if any instance fields in said undecided class are mutable; 
re-classifying said undecided class as immutable if all instance fields in said undecided class are 
immutable; 

repeating said testing each undecided class step until a number of undecided classes after a repetition 
of said testing step is identical to a number of undecided classes before the repetition of said testing step; 
and 

re-classifying remaining undecided classes as mutable classes to identify an exposure of variables of 
the program component to modification external to the program component. 
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It is certified that error appears in the above-identified patent and that said Letters Patent 
is hereby corrected as shown below: 

Claim 19 should read a$ follows: 

19. A method of detecting mutability of classes and class variables in a program component 
executing on a computing device including a processor and memory, said component being created 
in an object-oriented programming, the method comprising the steps of: 

obtaining a set of classes, each of said classes being classified as one of mutable, immutable, and 
undecided; 

testing each undecided class, said test being comprised of the sub-steps of: 
testing mutability of each instance field in said undecided class being tested; 
classifying an instance field as immutable if no possible state or encapsulation analysis 
modifications are found; 

classifying an instance field as undecided if there is insufficient class mutability information; and 
classifying an instance field as mutable otherwise; 

re-classifying an undecided class as mutable if any instance fields in said undecided class are 
mutable; 

re-classifying said undecided class as immutable if all instance fields in said undecided class are 
immutable; 

repeating said testing each undecided class step until a number of undecided classes after a 
repetition of said testing step is identical to a number of undecided classes before the repetition of 
said testing step; 

re-classifying remaining undecided classes as mutable classes; and 

testing mutability of each class field in each class to identify an exposure of variables of the 
program component to modification external to the program component 
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It is certified that error appears in the above-identified patent and that said Letters Patent 
is hereby corrected as shown below: 

Claim 26 should read as follows: 

26. A device for detecting mutability of variables, objects, fields, and classes in a program 
component executing on a computing device including a processor and memory, said component 
being created in an object-oriented programming language, the device comprising: memory for 
holding 

a layer of at least one core library and at least one data-flow analysis engine, for providing a 
particular abstraction of the program component; 

a layer of at least one utility module, for using the results of the at least one data analysis engine to 
generate basic results; and 

a layer of at least one mutability sub-analysis module for generating final results, 

wherein a variable is mutable if its state ever changes after said variable is initialized, the state of 
a variable being its value together with a state of any referenced object, 

an object is mutable if its state ever changes after said object is initialized, the state of an object 
being a set of states of all associated variables, 

a field is mutable if any variable corresponding to said field is mutable, and 

a class is mutable if any instance fields implemented by said class are mutable to identify an 
exposure of the variables of the program component to modification external to the program 
component. 
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It is certified that error appears in the aboveHdentified patent and that said Letters Patent 
is hereby corrected as shown below: 

Claim 38 should read as follows: 

38. A computer system for detecting mutability of variables, objects, fields, and classes in a 
program component executing on a computing device including a processor and memory, said 
component being created in an object-oriented programming language, the computer system 
comprising: 

at least one computer-readable memory including: 

code that determines whether any variable in the program component could undergo a state 
modification of a first type, said first type state modification being made by at least one method that 
is within the program component; and 

code that performs encapsulation analysis to determine whether any variable in the program 
component could undergo a state modification of a second type, said second type state modification 
being made by at least one method that is not within the program component to identify an exposure 
of the variables of the program component to modification external to the program component, 

wherein a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object, 

an object is mutable if its state ever changes after said object is initialized, the state of said object 
being a set of states of all associated variables, 

a field is mutable if any variable corresponding to said field is mutable, and 

a class is mutable if any instance fields implemented by said class are mutable. 
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It is certified that error appears in the above-Identified patent and that said Letters Patent 

is hereby corrected as shown below: 
Claim 44 should read as follows: 

44, A computer system for detecting mutability of variables, objects, fields, and classes in a program 
component executing on a computing device including a processor and memory, said component being 
created in an object-oriented programming language, the computer system comprising: 
at least one computer-readable memory including: 

code that obtains a set of classes, each of said classes being classified as one of mutable, immutable, and 
undecided; 

code that tests each undecided class, said test being comprised of: 

code that tests each field in said undecided class being tested, said field testing code being comprised of: 
code that determines whether any variable corresponding to said each field could undergo a state 

modification of a first type, said first type state modification being made by at least one method that is 

within the program component; and 

code that performs encapsulation analysis to determine whether any variable corresponding to said each 

field could undergo a state modification of a second type, said second type state modification being made by 

at least one method that is not within the program component; 

code that classifies said each field as immutable if no possible state modifications or breakages of 
encapsulation are found; 

code that classifies said each field as mutable if possible state modifications or breakages of 
encapsulation are found; and 

code that classifies said each field as undecided if there is insufficient class mutability information; 

code that re-classifies said undecided class as mutable if any fields in said undecided class are mutable; 

code that re-classifies said undecided class as immutable if all fields in said undecided class are 
immutable; 

code that repeats said testing each undecided class code until a number of undecided classes after a 
repetition of said testing code is identical to a number of undecided classes before the repetition of said 
testing code; and 

code that re-classifies remaining undecided classes as mutable classes to identify an exposure of the 
variables of the program component to modification external to the program component. 
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It is certified that error appears in the above-identified patent and that said Letters Patent 

is hereby corrected as shown below: 
Claim 45 should read as follows: 

45. A computer system for detecting mutability of variables, objects, flelds, and classes in a program component 
executing on a computing device including a processor and memory, said component being written in an 
object-oriented programming language, the computer system comprising: 

at least one computer-readable memory including: 
code that obtains a set of classes, each of said classes being classifled as one of mutable, immutable, and undecided; 

code that tests each undecided class, said test being comprised of: 
code that tests each instance field in said undecided class being tested, said instance field testing code being comprised 
of: 

code that determines whether any variable corresponding to said each instance field could undergo a state 
modification of a first type, said first type state modification being made by at least one method that is within the 
program component; and 

code that performs encapsulation analysis to determine whether any variable corresponding to said each instance 
field could undergo a state modification of a second type, said second type state modification being made by at least one 
method that is not within the program component; 

code that classifies said each instance field as immutable if no possible state modifications or breakages of 
encapsulation are found; 

code that classifies said each instance field as mutable if possible state modifications or breakages of encapsulation 
are found; and 

code that classifies said each instance field as undecided if there is insufficient class mutability information; 

code that re-classifies said undecided class as mutable if any instance fields in said undecided class are mutable; 

code that re-classifies said undecided class as immutable if all instance fields in said undecided class are immutable; 

code that repeats said testing each undecided class code until a number of undecided classes after a repetition of said 
testing code is identical to a number of undecided classes before the repetition of said testing code; and 

code that re-classifies remaining undecided classes as mutable classes to identify an exposure of the variables of the 
program component to modification external to the program component. 
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It is certified that error appears in the above-identified patent and that said Letters Patent 

is hereby corrected as shown below: 
Claim 53 should read as follows: 

53. A computer system for detecting mutability of classes and class variables in a program component executing on a 
computing device including a processor and memory, said component being created in an object-oriented programming 
language, the computer system comprising: 
at least one computer-readable memory including: 

code that obtains a set of classes, each of said classes being classified as one of mutable, immutable, and undecided; 

code that tests each undecided class, said test being comprised of: 

code that tests each instance field in said undecided class being tested, said instance field testing code being comprised 

of: 

code that determines whether any variable corresponding to said each instance field could undergo a state modification 
of a first type, said first type state modification being made by at least one method that is within the program component; 
and 

code that performs encapsulation analysis to determine whether any variable corresponding to said each instance field 
could undergo a state modification of a second type, said second type state modification being made by at least one method 
that is not within the program component; 

code that classifies said each instance field as immutable if no possible state modifications or breakages of 
encapsulation are found; 

code that classifies said each instance field as mutable if possible state modifications or breakages of encapsulation are 
found; and 

code that classifies said each instance field as undecided if there is insufficient class mutability information; 
code that re-classifies said undecided class as mutable if any instance fields in said undecided class are mutable; 
code that re-classifies said undecided class as immutable if all instance fields in said undecided class are immutable; 
code that repeats said testing each undecided class code until a number of undecided classes after a repetition of said 
testing code is identical to a number of undecided classes before the repetition of said testing code; 
code that re-classifies remaining undecided classes as mutable classes; and 

code that tests mutability of each class field in each class to identify an exposure of the variables of the program 
component to modification external to the program component. 
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It is certified that error appears in the above-identified patent and that said Letters Patent 
is hereby corrected as shown below: 

Claim 60 should read as follows: 

60. A computer system for detecting mutability of variables, objects, fields, and classes in a program 
component executing on a computing device including a processor and memory, said component being 
created in an object-oriented programming language, the computer system comprising: 
at least one computer-readable memory including: 

code that maintains a layer of at least one core library and at least one data-flow analysis engine in a 
mutability analyzer, for providing a particular abstraction of the program component; 

code that maintains a layer of at least one utility module in a mutability analyzer, for using the 
results of the at least one data analysis engine to generate basic results; and 

code that maintains a layer of at least one mutability sub-analysis module in a mutabUity analyzer, 
for generating final results, 

wherein a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object, 

an object is mutable if its state ever changes after said object is initialized, the state of said object 
being a set of states of all associated variables, 

a field is mutable if any variable corresponding to said field is mutable, and 

a class is mutable if any instance fields implemented by said class are mutable to identify an 
exposure of the variables of the program component to modification external to the program 
component. 
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IN THE CLAIMS 

1. (Currently Amended) A method of detecting mutability of variables, objects, 
fields, and classes in a program component evfrntin p on a computing device including a 
prn..pl.nr and memory, said component being writt^ created in an object-oriented programming 
language, the method comprising the steps of: 

determining whether any variable m the program component could undergo a state 
modification of a first type, said first type state modification being made by at least one method 
that is within the program component; and 

performing encapsulation analysis to determine whether any variable in the program 
component could undergo a state modification of a second type, said second type state 
modification being made by at least one method that is not within the program component, to 
iH^tifv exnosur e nf the variables of the propram c om p onent to modification external to the 
program component. 

wherein a variable is mutable if its state ever changes after said variable is initialized, the 
state of said variable being its value together with a state of any referenced object, 

wherein an object is mutable if its state ever changes after said object is initialized, said 
state of said object being a set of states of all associated variables, 

field is mutable if any variable corresponding to said field is mutable, and 
class is mutable if any instance fields implemented by said class are mutable. 



a : 
a ( 



2. (Original) The method as recited in claim 1, the first type state modification 
determination step comprising the steps of: 

detecting possible first type state modification of a value held in said each variable; and 
detecting possible first type state modification of a state of any object referenced by said 
each variable. 

3. (Previously Presented) The method as recited in claim 1, the encapsulation analysis 

step comprising the steps of: 

detecting possible second type state modification of a value held in said each variable; 
detecting possible second type state modification of a state of any object referenced by 
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said each variable, said possible second type state modification of a state of any object occurring 
at a point of initialization; and 

detecting possible breakage of variable encapsulation, 

wherein a variable is encapsulated if all references to objects reachable from it are defined 
within the program component and variable encapsulation is broken if a method within the 
program component causes a mutable object reachable from the variable to become accessible to 
at least one method that is not within the program component. 

4. (Previously Presented) The method as recited in claim 1 , wherein the method is 
implemented in an object oriented environment, said any instance fields being non-static fields, 
said variables bemg class variables or instance variables, each of said class variables being 
initialized upon completion of its corresponding <clmit> method, and each of said instance 
variables being initialized upon completion of its corresponding <init> method. 

5. (Original) The method as recited in claim 1, fiuther comprising the step of: 
identifying isolation faults due to detected mutable global variables or objects. 

6. (Original) The method as recited in claim 1 , fiirther comprising the step of: 
identifying fields and objects that can be determined to be constants because said identified fields 
and objects are not in the set of detected mutable fields and objects. 

7. (Currently Amended) A method of detecting mutabiUty of classes in a program 
component executing on a computing device including a pro cessor and memory, said component 
being writtes created in an object-oriented programming language, the method comprising the 
steps of: 

obtaining a set of classes, each of said classes being classified as one of mutable, 
immutable, and imdecided; 

testing each undecided class, said test being comprised of the sub-steps of: 

testing each field in said undecided class being tested, said test being comprised of 
the sub-sub-steps of: 
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determining whether any variable corresponding to said each field could 
undergo a state modification of first type, said first type state modification being 
made by at least one method that is within said component; and 

performing encapsulation analysis to determine whether any variable 
corresponding to said each field could undergo a state modification of a second 
type, said second type state modification being made by at least one method that is 
not within said component; 

classifying said each field as immutable if no possible first type or second type 
state modifications are found; 

classifying said each field as undecided if there is insufficient class mutabiUty 

information; and 

classifying said each field as mutable otherwise; 
re-classifying said undecided class as mutable if any fields in said undecided class are 
mutable; 

re-classifying said undecided class as immutable if all fields in said undecided class are 
immutable; 

repeating said testing each undecided class step until a number of undecided classes after 
a repetition of said testing step is identical to a number of undecided classes before the repetition 

of said testing step; and 

re-classifying remaining undecided classes as mutable classes, to identify an exposure of 
variables of the program component to modification externa l to the program component. 

8 . (Currently Amended) A method of detecting mutability of classes in a program 
component executing on a computing device including a pro cessor and memory, said component 
being written created in an object-oriented programming language, the method comprising the 
steps of: 

obtaining a set of classes, each of said classes being classified as one of mutable, 
immutable, and undecided; testing each undecided class, said test being comprised of the sub- 
steps of: 

testing each instance field in said undecided class being tested, said test being 
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comprised of the sub-sub-steps of: 

determining whether any variable corresponding to said each instance field 
could undergo a state modification of first type, said first type state modification 
being made by at least one method that is within said component; and 

performing encapsulation analysis to determine whether any variable 
corresponding to said each instance field could undergo a state mpdification of a 
second type, said second type state modification being made by at least one 
method that is not within said component; 

classifying said each instance field as immutable if no possible first type or second 
type state modifications are foxmd; 

classifying said each instance field as undecided if there is insufficient class 
mutability information; and 

classifying said each instance field as mutable otherwise; 
re-classifying said undecided class as mutable if any instance fields in said undecided 
class are mutable; 

re-classifying said undecided class as immutable if all instance fields in said undecided 
class are inmiutable; 

repeating said testing each undecided class step until a number of undecided classes after 
a repetition of said testing step is identical to a number of undecided classes before the repetition 
of said testing step; and 

re-classifying remaining undecided classes as mutable c1a5;ses to identify an exposure of 
variables of the program component to modification externa l to the program component. 

9. (Previously Presented) The method as recited in claim 8, the first type state 

modification determination sub-sub-step comprising the steps of: 

detecting possible first type state modification of a value held in said each variable; and 
detecting possible first type state modification of a state of any object referenced by said 

each variable, 

wherein a state of an object is modified if it can change after said object is initiaHzed, and 
the state of an object is a set of states of all associated variables and 
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a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object. 

1 0. (Previously Presented) The method as recited in claim 8, the performing 
encapsulation analysis sub-sub-step comprising the steps of: 

detecting possible second type modification of a value of said each variable; 

detecting possible second type modification of a state of any object referenced by said 
each variable, said possible second type state modification of a state of any object occurring at a 
point of initialization; and 

detecting possible breakage of variable encapsulation, 

wherein a state of an object is modified if it can change after said object is initiaUzed, and 
the state of an object is a set of states of all associated variables, 

a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object, 

a variable is encapsulated if all references to objects reachable fi-om it are defined within 
said component, and 

variable encapsulation is broken if a method within the program component causes a 
mutable object reachable fi-om a variable to become accessible to at least one method that is not 
within said component. 

1 1 . (Previously Presented) The method as recited in claim 8, wherein the method is 
implemented in an object oriented environment, said each variable corresponding to said each 
instance field being a non-static variable, and each non-static variable being initiaUzed upon 
completion of its corresponding <init> method. 

12. (Original) The method as recited in claim 8, further comprising the steps of: 
identifying an object as mutable if it is an instance of a mutable class; 
identifying an object as immutable if it is an instance of an immutable class; and 
identifying fields and objects that can be determined to be constants because said 

identified fields and objects are not in a set of detected mutable fields and objects. 
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13. (Original) The method as recited in claim 8, further comprising the step of: testing 
mutability of each undecided class field in each class. 

14. (Original) The method as recited in claim 13, further comprising the step of: 
identifying isolation faults due to detected mutable class fields. 

15. (Original) The method as recited in claim 13, the step of testing mutabiUty of each 
undecided class field in each class comprising the sub-steps of: 

determining whether any variable corresponding to said each undecided class field could 
undergo a first type state modification; and 

performing encapsulation analysis to determine whether any variable corresponding to 
said each undecided class field could undergo a second type state modification. 

16. (Previously Presented) The method as recited in claim 15, wherein the determining 
whether any variable corresponding to said each undecided class field could undergo a first type 
state modification sub-step comprises the steps of: 

detecting possible first type state modification of a value held in said each variable; and 
detecting possible first type state modification of a state of any object referenced by said 
each variable, 

wherein a state of an object is modified if it can change after said object is initialized, and 
the state of an object is a set of states of all associated variables and 

a variable is mutable if its state ever changes after said variable is initiaUzed, the state of 
said variable being its value together with a state of any referenced object. 

1 7. (Previously Presented) The method as recited in claim 1 5, wherein the performing 
encapsulation analysis to determine whether any variable corresponding to said each undecided 
class field could undergo a second type state modification sub-step comprises the steps of: 

detecting possible second type state modification of a value of said each variable; 
detecting possible second type state modification of a state of any object referenced by 
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said each variable, said possible second type state modification of a state of any object occurring 
at a point of initialization; and 

detecting possible breakage of variable encapsulation, 

wherein a state of an object is modified if it can change after said object is initialized, and 
the state of an object is a set of states of all associated variables, 

a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object, 

a variable is encapsulated if all references to objects reachable fi-om it are defined within 
said component, and 

variable encapsulation is broken if a method within the program component causes a 
mutable object reachable fi-om a variable to become accessible to at least one method that is not 
within said component. 

1 8 . (Previously Presented) The method as recited in claim 1 3 , wherein the method is 
implemented in an object oriented environment, said variables corresponding to said each 
undecided class field being static variables, and each static variables being initialized upon 
completion of its corresponding <clinit> method. 

19. (Currently Amended) A method of detecting mutability of classes and class 
variables in a program component executing on a computing device including a processor and 
memory, said component being written created in an object-oriented programming, the method 
comprising the steps of: 

obtaining a set of classes, each of said classes being classified as one of mutable, 

immutable, and undecided; 

testing each undecided class, said test being comprised of the sub-steps of: 

testing mutabiUty of each instance field in said undecided class being tested; 
classifying an instance field as immutable if no possible state or encapsulation 
analysis modifications are found; 

classifying an instance field as undecided if there is insufficient class mutabiUty 

information; and 
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classifying an instance field as mutable otherwise; 
re-classifying an undecided class as mutable if any instance fields in said undecided class 
are mutable; 

re-classifying said undecided class as immutable if all instance fields in said undecided 
class are immutable; 

repeating said testing each undecided class step until a number of undecided classes after 
a repetition of said testing step is identical to a number of undecided classes before the repetition 
of said testing step; 

re-classifying remaining undecided classes as mutable classes; and 
testing mutability of each class field in each r.lagg tn identify an exposure of variables of 
the program component to modification externa l to the proe;ram component. 

20. (Original) The method as recited in claim 19, wherein testing mutability of a field, 
whether said field is an instance field or a class field, is comprised of the sub-steps of 

determining whether any variable corresponding to said field being tested could undergo 
a state modification of a first type, said first type state modification being made by at least one 
method that is within said program component; and 

performing encapsulation analysis to determine whether any variable corresponding to 
said field being tested could undergo a state modification of a second type, said second type state 
modification being made by at least one method that is not within said program component; 

classifying said field being tested as immutable if no possible state modifications or 
breakages of encapsulation are found; 

classifying said field being tested as undecided if there is insufficient class mutabiUty 

information; and 

classifying said field being tested as mutable otherwise. 

2 1 . (Previously Presented) The method as recited in claim 20, wherein the first type 
state modification determination sub-step comprises the steps of 

detecting possible first type state modification of a value held in said each variable; and 
detecting possible first type state modification of a state of any object referenced by said 
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each variable, 

wherein a state of an object is modified if it can change after said object is initialized, and 
the state of an object is a set of states of all associated variables and 

a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object. 

22. (Previously Presented) The method as recited in claim 20, wherein the performing 
encapsulation analysis sub-step comprises the steps of: 

detecting possible second type state modification of a value of said each variable; 

detecting possible second type state modification of a state of any object referenced by 
said each variable, said possible second type state modification of a state of any object occurring 
at a point of initialization; and 

detecting possible breakage of variable encapsulation, 

wherein a state of an object is modified if it can change after said object is initialized, and 
the state of an object is a set of states of all associated variables, 

a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object, 

a variable is encapsulated if all references to objects reachable fi-om it are defined within 
said component, and 

variable encapsulation is broken if a method within the program component causes a 
mutable object reachable fi-om a variable to become accessible to at least one method that is not 
within said component. 

23. (Previously Presented) The method as recited in claim 19, wherein the method is 
implemented in an object oriented.environment, said instance fields being non-static fields, an 
instance variable being initialized upon completion of its corresponding <init> metiiod, and said 
class fields being static fields, a class variable being initiaUzed upon completion of its 
corresponding <clinit> method. 

24. (Original) The method as recited in claim 19, fiirther comprising tiie steps of: 
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identifying an object as mutable if it is an instance of a mutable class; 
identifying an object as immutable if it is an instance of an immutable class; and 
identifying fields and objects that can be detemiined to be constants because said 
identified fields and objects are not in a set of detected mutable fields and objects. 

25. (Original) The method as recited in claim 19, further comprising the step of: 
identifying isolation faults due to detected mutable class fields. 

26. (Currently Amended) A device for detecting mutability of variables, objects, 
fields, and classes in a program nnmpnnen t executing on a comnutinp device including a 
processor and memory, said component being writt e n created in an object-oriented programming 
language, the device comprising: memory for holding 

a layer of at least one core library and at least one data-flow analysis engineT for providing 
a particular abstraction of the program component; 

a layer of at least one utility moduley for using the results of the at least one data analysis 
engine to generate basic results; and 

a layer of at least one mutability sub-analysis module for generating final results, 

wherein a variable is mutable if its state ever changes after said variable is initialized, the 
state of a variable being its value together with a state of any referenced object, 

an object is mutable if its state ever changes after said object is initialized, the state of an 
object being a set of states of all associated variables, 

a field is mutable if any variable corresponding to said field is mutable, and 

a class is mutable if any instance fields implemented by said class are mutable to identify 
an exposure of the variables of the program component to modi fication external to the program 
component . 

27. (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one core library and at least one data analysis engine comprising: 

a library for collecting and manipulating static information about the program component 
by analyzing a set of class files, and for effectively constructing the program component's 
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28. (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one core library and at least one data analysis engine comprising: a library for allowing a 
user to read class.files. 

29. (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one core library and at least one data analysis engine comprising: an intra-procedural data 
analysis engine for iteratively computing an effect of an instruction on information associated 
with locations on a method frame, said method frame being an operand stack and a local 
variables array. 

30. (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one core library and at least one data analysis engine comprising: an inter-procedural data 
analysis engine for computing the effect of a method on information associated with variables 
that still exist upon completion of this method. 

3 1 . (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one utility module comprising: a type analysis utility module for identifying a set of 
possible types for each instruction and each frame location in each method. 

32. (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one utility module comprising: a reachability analysis utiUty module for identifying, for 
each method, a set of escaping objects and class variables from which a mutable object is 
reachable for each instruction and each frame location referring to said mutable object. 

3 3 . (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one mutability sub-analysis module comprising: a value modification mutability sub- 
analysis module for identifying, for each method, a set of fields whose corresponding instance 
and class variables may be set within said each method. 
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34. (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one mutability sub-analysis module comprising: an object modification mutabiUty sub- 
analysis module for identifying, for each method, a set of reference-type fields and method 
parameters, said set of reference-type fields and method parameters referencing an object, a state 
of said object being modified by said each method. 

3 5 . (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one mutabihty sub-analysis module comprising: a variable accessibility mutability sub- 
analysis module for identifying, for each variable, whether its value may be modified directly by 
at least one method that is not within the program component. 

36. (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one mutability sub-analysis module comprising: an object accessibility mutability sub- 
analysis module for detecting possible accessibility of a state of each object, by determining if 
each variable associated with said object is encapsulated, 

wherein a variable is encapsulated if all references to objects reachable fi-om it are defined 
within the program componentt^ and 

said accessibility is made by at least one method that is not within the program 

component. 

37. (Previously Presented) The device as recited in claim 26, wherein the layer of at 
least one mutability sub-analysis module comprising: a breakage of encapsulation mutability sub- 
analysis module for detecting a possible breakage of encapsulation, 

wherein a variable is encapsulated if all references to mutable objects reachable fi-om it 
are defined within the program component, and 

variable encapsulation is broken if a method within the program component causes a 
mutable object reachable fi-om the variable to become accessible to at least one method that is not 
within the program component. 
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3 8 . (Currently Amended) A computer system for detecting mutability of variables, 
objects, fields, and classes in a program componen t executing on a computing device including a 
processor and memory , said component being written created in an object-oriented programming 
language, the computer system comprising: 

. at least one computer-readable memory including: 

code that determines whether any variable in the program component could 
undergo a state modification of a first type, said first type state modification being made 
by at least one method that is within the program component; and 

code that performs encapsulation analysis to determine whether any variable in 
the program component could undergo a state modification of a second type, said second 
type state modification being made by at least one method that is not within the program 
mmpnnen tto identify an exposure of the variables of the program component to 
modification external to the program component . 

wherein a variable is mutable if its state ever changes afl:er said variable is 
initialized, the state of said variable being its value together with a state of any referenced 
object, 

an object is mutable if its state ever changes after said object is initiaUzed, the 
state of said object being a set of states of all associated variables, 

a field is mutable if any variable corresponding to said field is mutable, and 
a class is mutable if any instance fields implemented by said class are mutable. 

39. (Original) The computer system as recited in claim 38, wherein the code that 
determines whether any variable could undergo the first type state modification comprises: 

code that detects possible first type state modification of a value held in said each 
variable; and 

code that detects possible first type state modification of a state of any object referenced 
by said each variable. 

40. (Previously Presented) The computer system as recited in claim 38, wherein the 
code that performs encapsulation analysis step comprises: 
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code that detects possible second type state modification of a value held in said each 
variable; 

code that detects possible second type state modification of a state of any object 
referenced by said each variable, said possible second type state modification of a state of any 
object occurring at a point of initialization; and 

code that detects possible breakage of variable encapsulation, 

wherein a variable is encapsulated if all references to objects reachable from it are defined 
within the program component and 

variable encapsulation is broken if a method within the program component causes a 
mutable object reachable from the variable to become accessible to at least one method that is not 
within the program component. 

41. (Previously Presented) The computer system as recited in claim 38, wherein the 
program component is implemented in an object oriented environment, said any instance fields 
being non-static fields, said variables being class variables or instance variables, each of said 
class variables being initialized upon completion of its corresponding <clinit> method, and each 
of said instance variables being initialized upon completion of its corresponding <imt> method. 

42. (Previously Presented) The computer system as recited m claim 38, wherein the at 
least one computer-readable memory fiirther includes: code that identifies isolation faults due to 
detected mutable global variables or objects. 

43. (Original) The computer system as recited in claim 38, wherein the at least one 
computer-readable memory fiirther includes: code that identifies fields and objects that can be 
determined to be constants because said identified fields and objects are not in the set of detected 
mutable fields and objects. 

44. (Currently Amended) A computer system for detecting mutabihty of variables, 
objects, fields, and classes in a program component executing on a computing device including a 
processor and memory, said component being v r Titton created in an object-oriented programming 
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language, the computer system comprising: 

at least one computer-readable memory including: 

code that obtains a set of classes, each of said classes being classified as one of mutable, 

immutable, and imdecided; 

code that tests each undecided class, said test being comprised of: 

code that tests each field in said undecided class being tested, said field testing 

code being comprised of: 

code that determines whether any variable corresponding to said each field could 
undergo a state modification of a first type, said first type state modification being made 
by at least one method that is within the program component; and 

code that performs encapsulation analysis to determine whether any variable 
corresponding to said each field could undergo a state modification of a second type, said 
second type state modification being made by at least one method that is not within the 

program component; 

code that classifies said each field as immutable if no possible state modifications 

or breakages of encapsulation are foimd; 

code that classifies said each field as mutable if possible state modifications or 
breakages of encapsulation are found; and 

code that classifies said each field as undecided if there is insufficient class 

mutability information; 

code that re-classifies said undecided class as mutable if any fields in said undecided 
class are mutable; 

code that re-classifies said undecided class as immutable if all fields in said undecided 
class are immutable; 

code that repeats said testing each undecided class code until a number of undecided 
classes after a repetition of said testing code is identical to a number of undecided classes before 
the repetition of said testing code; and 

code that re-classifies remaining undecided classes as mutable classes to identify an 
ex posure of the variables of the p rnm-nm component to modification external to the program 
component . 
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45 . (Currently Amended) A computer system for detecting mutability of variables, 
objects, fields, and classes in a program componen t executing on a computing device including a 
processor and memory, said component being written creat e d in an object-oriented programming 
language, the computer system comprising: 

at least one computer-readable memory including: 

code that obtains a set of classes, each of said classes being classified as one of mutable, 
immutable, and imdecided; 

code that tests each undecided class, said test being comprised of: 

code that tests each instance field in said imdecided class being tested, said 
instance field testing code being comprised of: 

code that determines whether any variable corresponding to said each 
instance field could undergo a state modification of a first type, said first type 
state modification being made by at least one method that is within the program 
component; and 

code that performs encapsulation analysis to determine whether any 
variable corresponding to said each instance field could undergo a state 
modification of a second type, said second type state modification being made by 
at least one method that is not within the program component; 
code that classifies said each instance field as immutable if no possible state 

modifications or breakages of encapsulation are found; 

code that classifies said each instance field as mutable if possible state 

modifications or breakages of encapsulation are found; and 

code that classifies said each instance field as undecided if there is insufficient 

class mutabihty information; 

code that re-classifies said undecided class as mutable if any instance fields in said 
imdecided class are mutable; 

code that re-classifies said undecided class as immutable if all instance fields in said 
undecided class are immutable; 

code that repeats said testing each undecided class code until a number of undecided 
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classes after a repetition of said testing code is identical to a ntraiber of undecided classes before 
the repetition of said testing code; and 

code that re-classifies remaining undecided classes as mutable classes to identify an 
ex posure of the variables of the nrogram com ponent to modification external to the program 
component . 

46. (Previously Presented) The computer system as recited in claim 45, wherein the 
code that determines whether any variable could undergo a first type state modification 
comprises: 

code that detects possible first type state modification of a value held in said each 
variable; and 

code that detects possible first type state modification of a state of any object referenced 
by said each variable, 

wherein a state of an object is modified if it can change after said object is initialized, and 
the state of an object is a set of states of all associated variables and 

a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object. 

47. (Previously Presented) The computer system as recited in claim 45, wherein the 
code that performs encapsulation analysis comprises: 

code that detects possible second type modification of a value of said each variable; 

code that detects possible second type modification of a state of any object referenced by 
said each variable, said possible second type state modification of a state of any object occurring 
at a point of initialization; and 

code that detects possible breakage of variable encapsulation, 

wherein a state of an object is modified if it can change after said object is initialized, and 
the state of an object is a set of states of all associated variables, 

a variable is mutable if its state ever changes after said variable is initiahzed, the state of 
said variable being its value together with a state of any referenced object, 

a variable is encapsulated if all references to objects reachable from it are defined within 
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said component, and 

variable encapsulation is broken if a method within the program component causes a 
mutable object reachable from a variable to become accessible to at least one method that is not 
within said component. 

48. (Previously Presented) The computer system as recited in claim 45, wherein the 
program component is implemented in an object oriented environment, said each variable 
corresponding to said each instance field being a non-static variable, and each non-static variable 
being initialized upon completion of its corresponding <init> method. 

49. (Original) The computer system as recited in claim 45, wherein the at least one 
computer-readable memory further includes: 

code that identifies an object as mutable if it is an instance of a mutable class; 
code that identifies an object as immutable if it is an instance of an immutable class; and 
code that identifies fields and objects that can be determined to be constants because said 
identified fields and objects are not in a set of detected mutable fields and objects. 

50. (Original) The computer system as recited in claim 45, wherein the at least one 
computer-readable memory fiirther includes: code that tests mutability of each undecided class 
field in each class. 

51. (Original) The computer system as recited in claim 50, wherein the at least one 
computer-readable memory fiirther includes: code that identifies isolation faults due to detected 
mutable class fields. 

52. (Original) The computer system as recited in claim 50, wherein the code that tests 
mutability of each imdecided class field in each class comprises: 

code that determines whether any variable corresponding to said each undecided class 
field could undergo a first type state modification; and 

code that performs encapsulation analysis to determine whether any variable 
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corresponding to said each undecided class field could undergo a second type state modification. 

53 . (Currently Amended) A computer system for detecting mutability of classes and 
class variables in a program rnmponent executing on a computing device including a processor 
and memory, said component being written created in an object-oriented programming language, 
the computer system comprising: 

at least one computer-readable memory including: 

code that obtains a set of classes, each of said classes being classified as one of 
mutable, immutable, and undecided; 

code that tests each undecided class, said test being comprised of: 

code that tests each instance field in said undecided class being tested, said 
instance field testing code being comprised of: 

code that determines whether any variable corresponding to said each 
instance field could undergo a state modification of a first type, said first type 
state modification being made by at least one method that is within the program 
component; and 

code that performs encapsulation analysis to determine whether any 
variable corresponding to said each instance field could undergo a state 
modification of a second type, said second type state modification being made by 
at least one method that is not within the program component; 
code that classifies said each instance field as immutable if no possible state 

modifications or breakages of encapsulation are found; 

code that classifies said each instance field as mutable if possible state 

modifications or breakages of encapsulation are found; and 

code that classifies said each instance field as undecided if there is insufficient 

class mutability information; 

code that re-classifies said undecided class as mutable if any instance fields in said 
undecided class are mutable; 

code that re-classifies said undecided class as immutable if all instance fields in said 

undecided class are inunutable; 
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code that repeats said testing each undecided class code until a number of undecided 
classes after a repetition of said testing code is identical to a number of undecided classes before 
the repetition of said testing code; 

code that re-classifies remaining undecided classes as mutable classes; and 
code that tests mutability of each class field in each r.lass to identify an exposure of the 
variables of the program component to modification extema l to the program component. 

54. (Original) The computer system as recited in claim 53, wherein the code that tests 
mutability of a field, whether said field is an instance field or a class field, is comprised of: 

code that determines whether any variable corresponding to said field being tested could 
undergo a state modification of a first type, said first type state modification being made by at 
least one method that is within said program component; and 

code that performs encapsulation analysis to determine whether any variable 
corresponding to said field being tested could undergo a state modification of a second type, said 
second type state modification being made by at least one method that is not within said program 
component; 

code that classifies said field being tested as immutable if no possible state modifications 
or breakages of encapsulation are found; 

code that classifies said field being tested as undecided if there is insufficient class 
mutability information; and 

code that classifies said field being tested as mutable otherwise. 

55. (Previously Presented) The computer system as recited in claim 54, wherein the 
code that determines whether any variable could undergo first type state modification comprises: 

code that detects possible first type state modification of a value held in said each 
variable; and 

code that detects possible first type state modification of a state of any object referenced 
by said each variable, 

wherein a state of an object is modified if it can change after said object is initialized, and 
the state of an object is a set of states of all associated variables and 
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a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object. 

56. (Previously Presented) The computer system as recited in claim 54, wherein the 
code that performs encapsulation analysis comprises: 

code that detects possible second type state modification of a value of said each variable; 

code that detects possible second type state modification of a state of any object 
referenced by said each variable, said possible second type state modification of a state of any 
object occurring at a point of initialization; and 

code that detects possible breakage of variable encapsulation, 

wherein a state of an object is modified if it can change after said object is initialized, and 
the state of an object is a set of states of all associated variables, 

a variable is mutable if its state ever changes after said variable is initialized, the state of 
said variable being its value together with a state of any referenced object, 

a variable is encapsulated if all references to objects reachable from it are defined within 
said component, and 

variable encapsulation is broken if a method within the program component causes a 
mutable object reachable from a variable to become accessible to at least one method that is not 
within said component. 

57. (Previously Presented) The computer system as recited in claim 53, wherein the 
program component is implemented in an object oriented environment, said instance fields being 
non-static fields, an instance variable being initialized upon completion of its corresponding 
<init> method, and said class fields being static fields, a class variable being initialized upon 
completion of its corresponding <clinit> method. 

58. (Original) The computer system as recited in claim 53, wherein the at least one 
computer-readable memory fiirther includes: 

code that identifies an object as mutable if it is an instance of a mutable class; 

code that identifies an object as immutable if it is an instance of an immutable class; and 
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code that identifies fields and objects that can be determined to be constants because said 
identified fields and objects are not in a set of detected mutable fields and objects. 

59. (Original) The computer system as recited in claim 53, wherein the at least one 
computer-readable memory fiirther includes: code that identifies isolation faults due to detected 
mutable class fields. 

60. (Currently Amended) A computer system for detecting mutability of variables, 
objects, fields, and classes in a program cninponent executing on a computing device including a 
processor and memory , said component being writt e n created in an object-oriented programming 
language, the computer system comprising: 

at least one computer-readable memory including: 

code that maintains a layer of at least one core library and at least one data-flow 
analysis engine in a mutability analyzer, for providing a particular abstraction of the 
program component; 

code that maintains a layer of at least one utility module in a mutability analyzer, 
for using the results of the at least one data analysis engine to generate basic results; and 

code that maintains a layer of at least one mutabihty sub-analysis module in a 
mutability analyzer, for generating final results, 

wherein a variable is mutable if its state ever changes after said variable is 
initialized, the state of said variable being its value together with a state of any referenced 
object, 

an object is mutable if its state ever changes after said object is initialized, the state of 

said object being a set of states of all associated variables, 

a field is mutable if any variable corresponding to said field is mutable, and 

a class is mutable if any instance fields implemented by said class are mutable to identify 

an exposure of the variables of the program component to modification external to the program 

component . 

61 . (Original) The computer system as recited in claim 60, wherein the code that 
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maintains the layer of at least one core library and at least one data analysis engine comprises: 
code that collects and manipulates static information about the program component by 

analyzing a set of classfiles; and 

code that effectively constructs the program component's reference, hierarchy, and call 

graphs. 

62. (Original) The computer system as recited in claim 60, wherein the code that 
maintains the layer of at least one core library and at least one data analysis engine comprises: 
code that allows a user to read classfiles. 

63 . (Original) The computer system as recited in claim 60, wherein the code that 
maintains the layer of at least one core library and at least one data analysis engine comprises: 
code that iteratively computes an effect of an instruction on information associated with locations 
on a method frame, said method frame being an operand stack and a local variables array. 

64. (Original) The computer system as recited in claim 60, wherein the code that 
maintains the layer of at least one core library and at least one data analysis engine comprises: 
code that computes the effect of a method on information associated with variables that still exist 
upon completion of this method. 

65. (Original) The computer system as recited in claim 60, wherein the code that 
maintains the layer of at least one utility module comprises: code that identifies a set of possible 
types for each instruction and each frame location in each method. 

66. (Original) The computer system as recited in claim 60, wherein the code that 
maintains the layer of at least one utility module comprises: code that identifies, for each method, 
a set of escaping objects and class variables from which a mutable object is reachable for 
instruction and each frame location referring to said mutable object. 

67. (Original) The computer system as recited in claim 60, wherein the code that 
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maintains the layer of at least one mutability sub-analysis module comprises : code that identifies, 
for each method, a set of fields whose corresponding instance and class variables may be set 
within said each method. 

68. (Original) The computer system as recited in claim 60, wherein the code that 
maintains the layer of at least one mutability sub-analysis module comprises: code that identifies, 
for each method, a set of reference-type fields and method parameters, said set of reference-type 
fields and method parameters referencing an object, a state of said object being modified by said 
each method. 

69. (Original) The computer system as recited in claim 60, wherein the code that 
maintains the layer of at least one mutability sub-analysis module comprises: code that identifies, 
for each variable, whether its value may be modified directly by at least one method that is not 
within the program component. 

70. (Previously Presented) The computer system as recited in claim 60, wherein the 
code that maintains the layer of at least one mutability sub-analysis module comprises: 

code that detects possible accessibiUty of a state of each object, by determining if each 
variable associated with said object is encapsulated, 

wherein a variable is encapsulated if all references to objects reachable fi-om it are defined 
within the program component and 

said accessibility is made by at least one method that is not within the program 

component. 

7 1 . (Previously Presented) The computer system as recited in claim 60, wherein the 
code that maintains the layer of at least one mutability sub-analysis module comprises: 

code that detects a possible breakage of encapsulation, 

wherein a variable is encapsulated if all references to mutable objects reachable fi-om it 
are defined within the program component and 

variable encapsulation is broken if a method within the program component causes a 
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mutable object reachable from the variable to become accessible to at least one method that is not 
within the program component. 
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REMARKS 

Claims 1 -7 1 are pending in the appUcation. All Claims have been rejected. 

The Examinerrejected Claims 1-71 under 35 U.S.C.§ 101, as being directed to non-statutoiy 
subject matter. In response independent Claims 1, 7, 8, 19, 26, 38, 44, 45, 53, and 60 were amended 
to clarify that the program components recited in the claims are executing on a computing device 
which includes a processor and memory and that the claim steps are performed to identify an 
exposure of the variables of the program component to modification external to the program 
component. These amendments now make the subject matter stattxtory, as defmed by State Street 
Bank & Trust Co.v. Signattire Financial Group Inc., 149 F.3d 1368,47 USPQ2d 1596 (Fed.Cir.1998) 
and described in MPEP section 2106 titled "Patentable Subject Matter - Computer-Related 
Inventions". 

Accordingly, it is submitted that independent Claims 1, 7, 8, 19, 26, 38, 44, 45, 53, and 
60 are directed to stattxtory subject matter and, since the rejection in view of the prior art has been 
withdrawn by the Examiner it is beheved that these claims are therefore patentable. Without 
conceding the patentability per se of dependent Claims 2-6, 9-25, 27-43, 46-52, 54-59, and 61- 
71 , these are likewise beUeved to overcome rejection by virhie of their dependence on their 
respective independent claims. 

Applicants beUeve that all Claims pending in the present appUcation are in condition for 
allowance. If the Examiner has any questions regarding this communication or feels that an 
interview would be helpful in advancing the prosecution of this application, the Examiner is 
requested to contact the undersigned attorney. 

Respectfully submitted. 




Paul J. Sdnell 

DILWORTH & BARRESE, LLP Reg. No. 33,494 

333 Earle Ovington Boulevard Attorney for Applicant 

Uniondale, New York 11553 

Telephone: 516-228-8484 

Facsimile: 516-228-8516 
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